Sr IT Security Analyst - G&A and Business Applications

Summary

Dynatrace is a software company focused on creating value for large enterprises and end customers through innovative technology. The IT Security Analyst will evaluate and implement security controls across enterprise applications and SaaS-based business systems, secure integrations and data flows, support compliance and audit activities, and manage application and cloud security risks.

Responsibilities

• Assess and strengthen security controls for enterprise applications including:
• NetSuite (ERP)
• SAP SuccessFactors (HRIS)
• Review system configurations, access models, and integrations to identify security risks
• Partner with application owners to implement least privilege access and secure configuration standards
• Analyze and secure data flows between business systems and internal platforms
• Evaluate API and middleware integrations (e.g., Boomi) for:
• Authentication and authorization risks
• Data exposure risks
• Logging and monitoring gaps
• Recommend and enforce secure integration patterns across the IT landscape
• Perform security reviews and risk assessments for new and existing G&A applications
• Define and recommend compensating controls where platform limitations exist
• Support threat modeling and identify combination risks across interconnected systems
• Align application security controls with regulatory and audit requirements:
• FedRAMP (where applicable to systems in scope)
• ISO 27001 and SOC 2 control frameworks
• SOX (financial controls, user access reviews)
• Support audit activities including:
• Evidence collection
• Control validation
• Remediation tracking
• Contribute to securing SaaS and cloud-hosted applications within AWS environments
• Review IAM configurations, network exposure, and platform-level risks
• Partner with cloud and platform teams to ensure consistent security control implementation

Skills

• 2+ years of experience in IT security, application security, or enterprise systems security
• Candidates who live within a 45 mile radius of Boston, MA; Detroit, MI; and Denver, CO will be required to work hybrid (2 days per week) out of our Dyntrace office
• Candidates are required to work EST hours for this position
• Hands-on experience securing or administering one or more of the following:
• NetSuite
• SAP SuccessFactors
• Strong understanding of:
• Identity and access management (IAM) principles
• Role-based access control (RBAC) and segregation of duties (SoD)
• Secure system integration and API security
• Experience working with compliance frameworks:
• Familiarity with FedRAMP, ISO 27001, and SOC 2
• Experience with AWS security controls (IAM, logging, network security)
• Knowledge of enterprise logging/monitoring practices (SIEM integration, audit logging)
• Experience supporting audits or working with internal/external auditors
• Experience with Dell Boomi or similar iPaaS solutions
• Familiarity with identity providers (e.g., Okta, Azure AD) and SSO integrations
• Familiarity with SOX controls for financial systems
• Ability to translate business processes into security control requirements
• Strong analytical mindset with focus on risk identification and mitigation
• Experience working cross-functionally with IT, Security, and business stakeholders
• Clear communication skills with ability to explain risks and recommendations

Qualifications

Must Haves

• 2+ years of experience in IT security, application security, or enterprise systems security
• Candidates who live within a 45 mile radius of Boston, MA; Detroit, MI; and Denver, CO will be required to work hybrid (2 days per week) out of our Dyntrace office
• Candidates are required to work EST hours for this position

Nice to Haves

• Hands-on experience securing or administering one or more of the following:
• NetSuite
• SAP SuccessFactors
• Strong understanding of:
• Identity and access management (IAM) principles
• Role-based access control (RBAC) and segregation of duties (SoD)
• Secure system integration and API security
• Experience working with compliance frameworks:
• Familiarity with FedRAMP, ISO 27001, and SOC 2
• Experience with AWS security controls (IAM, logging, network security)
• Knowledge of enterprise logging/monitoring practices (SIEM integration, audit logging)
• Experience supporting audits or working with internal/external auditors
• Experience with Dell Boomi or similar iPaaS solutions
• Familiarity with identity providers (e.g., Okta, Azure AD) and SSO integrations
• Familiarity with SOX controls for financial systems
• Ability to translate business processes into security control requirements
• Strong analytical mindset with focus on risk identification and mitigation
• Experience working cross-functionally with IT, Security, and business stakeholders
• Clear communication skills with ability to explain risks and recommendations

Benefits

• A globally unique and tailor-made career development program recognizing your potential, promoting your strengths, and supporting you in achieving your career goals.
• A relocation team that is eager to help you start your journey to a new country, always there to support and by your side.
• Stock purchase options.
• Health, Dental, Life, STD, LTD, 401K, PTO.
• This is a remote eligible position. Candidates who live within a 45 mile radius of Boston, MA; Detroit, MI; and Denver, CO will be required to work hybrid (2 days per week) out of our Dyntrace office.